{"id":"CVE-2007-3165","aliases":["DEBIAN-CVE-2007-3165","EUVD-2007-3157","GHSA-p2h5-374v-r86q"],"status":"published","title":"Tor before 0.1.2.14 can construct circuits in which an entry guard is in the same family as the...","description":"Tor before 0.1.2.14 can construct circuits in which an entry guard is in the same family as the exit node, which might compromise the anonymity of traffic sources and destinations by exposing traffic to inappropriate remote observers.","severity":{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.01482,"percentile":0.74137,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"published":"2007-06-11T22:00:00Z","modified":"2026-10-21T17:47:41Z","fixes":[{"ecosystem":"Debian:12","package":"tor","fixed_in":["0.1.2.14-1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"tor","fixed_in":["0.1.2.14-1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"tor","fixed_in":["0.1.2.14-1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"tor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.1.2.14-1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"tor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.1.2.14-1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"tor","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.1.2.14-1"}]}]}],"products":[{"vendor":"tor","product":"tor"}],"references":[{"url":"http://secunia.com/advisories/25415","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred","Patch","Vendor Advisory","advisory","fix"]},{"url":"http://www.vupen.com/english/advisories/2007/1964","tags":["vdb-entry","x_refsource_VUPEN","x_transferred","advisory"]},{"url":"http://osvdb.org/35670","tags":["vdb-entry","x_refsource_OSVDB","x_transferred","web"]},{"url":"http://www.securityfocus.com/bid/24180","tags":["vdb-entry","x_refsource_BID","x_transferred","Patch","fix"]},{"url":"http://archives.seul.org/or/announce/May-2007/msg00000.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2007-3165"},{"url":"https://github.com/advisories/GHSA-p2h5-374v-r86q"},{"url":"https://security-tracker.debian.org/tracker/CVE-2007-3165","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2007-3165","description":"Tor before 0.1.2.14 can construct circuits in which an entry guard is in the same family as the exit node, which might compromise the anonymity of traffic sources and destinations by exposing traffic to inappropriate remote observers.","status":"published","published":"2007-06-11T22:00:00Z","modified":"2024-08-07T14:05:29.252Z","updated_at":"2026-11-02T13:32:45.563938Z"}],"euvd":[{"id":"EUVD-2007-3157","description":"Tor before 0.1.2.14 can construct circuits in which an entry guard is in the same family as the exit node, which might compromise the anonymity of traffic sources and destinations by exposing traffic to inappropriate remote observers.","status":"published","published":"2007-06-11T22:00:00Z","modified":"2024-08-07T14:05:29Z","updated_at":"2026-11-03T01:38:17.502481Z"}],"ghsa":[{"id":"GHSA-p2h5-374v-r86q","title":"Tor before 0.1.2.14 can construct circuits in which an entry guard is in the same family as the...","description":"Tor before 0.1.2.14 can construct circuits in which an entry guard is in the same family as the exit node, which might compromise the anonymity of traffic sources and destinations by exposing traffic to inappropriate remote observers.","status":"published","published":"2022-05-01T18:11:04Z","modified":"2023-01-31T05:04:10Z","updated_at":"2026-11-02T14:48:37.279982Z"}],"nvd":[{"id":"CVE-2007-3165","description":"Tor before 0.1.2.14 can construct circuits in which an entry guard is in the same family as the exit node, which might compromise the anonymity of traffic sources and destinations by exposing traffic to inappropriate remote observers.","status":"published","published":"2007-06-11T22:30:00Z","modified":"2026-06-16T22:41:11.727Z","cvss":[{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:01:16.479378Z"}],"osv":[{"id":"CVE-2007-3165","description":"Tor before 0.1.2.14 can construct circuits in which an entry guard is in the same family as the exit node, which might compromise the anonymity of traffic sources and destinations by exposing traffic to inappropriate remote observers.","status":"published","published":"2007-06-11T22:30:00Z","modified":"2026-04-10T03:38:55.279948Z","updated_at":"2026-11-02T15:43:56.865964Z"},{"id":"DEBIAN-CVE-2007-3165","description":"Tor before 0.1.2.14 can construct circuits in which an entry guard is in the same family as the exit node, which might compromise the anonymity of traffic sources and destinations by exposing traffic to inappropriate remote observers.","status":"published","published":"2007-06-11T22:30:00Z","modified":"2026-10-21T17:47:41.234978598Z","updated_at":"2026-11-02T15:45:23.411908Z"}]}}